internet explorer problem

i have ie 8 but it shuts unexpextedly some times, when i start pc i get the messages ; see attached file , also version of ie screen shot attached
screen-shot.doc
mahmood_786Asked:
Who is Participating?
 
rpggamergirlConnect With a Mentor Commented:
Those are bad dlls that maybe the scanner you used have removed but left the reg entries intact.

Error loading usually means that those bad dlls have been removed, hence the error. You could disable the relevant loading point in the registry via "msconfig" that points to those files. You could also use Hijackthis to remove the startup points.

Or, you could run a scan like MalwareBytes or other tools as the PC  might still be infected. Post the logs for us to look at.


MalwareBytes
Malwarebytes http://www.malwarebytes.org/mbam-download.php




If the problem persists afterwards, you may run these tool as well.

You can try TDSSKiller or RogueKiller
TDSSKiller:
http://support.kaspersky.com/viruses/solutions?qid=208280684


ComboFix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
0
 
Martin81Commented:
As your on windows XP you should have the option to uninstall IE8 from add/remove programs. My advice would be to uninstall then reinstall it.
0
 
FarWestCommented:
it is better if you go to tools/options/advance tab and then check off the "enable third party browser extensions"
I suspect that those DLL are related to some kind of malware that was cleaned up by the anti-virus
good luck
0
Cloud Class® Course: Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

 
rpggamergirlConnect With a Mentor Commented:
In Hijackthis the 04 entries would be same or similar below which you can checkmark and click "Fix checked" for Hijackthis to remove them and stop the error.

O4 - HKCU\..\Run: [Gsare] rundll32.exe "C:\WINDOWS\kbdvexy.dll",Startup
O4 - HKLM\..\Run: [Dcuxiwamiku] rundll32.exe "C:\WINDOWS\uqewimuwesebebe.dll",Startup

OR disable via msconfig:

Start > Run > type in

msconfig
Press Enter.

click on the "Startup" tab and uncheck the relevant entries.
0
 
mahmood_786Author Commented:
please see the log file attached
mbam-log-2011-04-15--01-07-11-.txt
0
 
rpggamergirlCommented:
Did you run ComboFix? Can we look at the log?

MalwareBytes removed some files that ComboFix had in quarantine.
0
 
mahmood_786Author Commented:
ok  combofix log is attached.
log.txt
0
 
rpggamergirlCommented:
Thanks for the log.

I haven't thoroughly checked the CF log as I'm on my way out.... but this script should stopped the error messages in your screenshot.
I'll check back in few hours.
It's a file infector tha talso infected the system.

Run combofix again using this script.
 
1. Open Notepad.
2. Now copy/paste the text between the lines below into the Notepad window:
------------------------------------------------------------------------
RenV::
c:\program files\Adobe\Acrobat 7.0\Distillr\Acrotray .exe
c:\program files\Analog Devices\SoundMAX\DrvLsnr .exe
c:\program files\ATI Technologies\ATI Control Panel\atiptaxx .exe
c:\program files\Common Files\Real\Update_OB\realsched .exe
c:\program files\CyberLink\PowerDVD\PDVDServ .exe
c:\program files\CyberLink\PowerDVD\Language\Language .exe
c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe
c:\program files\Java\jre6\bin\jusched .exe
c:\program files\LogMeIn\x86\LogMeInSystray .exe
c:\program files\McAfee.com\Agent\mcagent .exe
c:\program files\Nokia\Nokia PC Suite 7\PCSuite .exe
c:\program files\QuickTime\QTTask   .exe
c:\program files\Spybot - Search & Destroy\TeaTimer .exe
c:\program files\Windows Live\Messenger\msnmsgr  .exe
c:\windows\FixCamera .exe
c:\windows\tsnp2std .exe
c:\windows\vsnp2std .exe
c:\windows\ime\IMJP8_1\IMJPMIG .exe
c:\windows\system32\rundll32 .exe


Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gsare"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Dcuxiwamiku"=-

------------------------------------------------------------------------
3. Save the above as CFScript.txt in the same location as Combofix.exe.
4. Then drag the CFScript.txt into ComboFix.exe. This will start ComboFix again.



0
 
mahmood_786Author Commented:
once i have donethis what should i do?
0
 
rpggamergirlConnect With a Mentor Commented:
Once you created CFScript(saved in the same location as ComboFix.exe), and after you drag and drop the script into ComboFix.exe... (see image below)
[IMG]http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif[/IMG]  

Then combofix will run and produce a new log.
Please post that log.
0
 
James MurrellProduct SpecialistCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.